Product updates
Stable releases of the Codex command-line tool.
Timeline
## Bug Fixes - Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057) ## Changelog Full Changelog: rust-v0.146.0...rust-v0.146.1 - #37057 [0.146] Backport safer cyber-model auto-review defaults @anp-oai
## New Features - Name new sessions with `/new` or `/clear`, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011) - Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, #35254, #34931, #34979) - Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, #35251) - Connect app-server to remote Code Mode hosts over WebSocket. (#35078, #35098) - Enable standalone web search for compatible custom model providers. (#34846) - Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, #35198) ## Bug Fixes - Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, #34509, #34655, #34678, #35023, #35056, #35239) - Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, #34957, #35028, #35144, #35146, #35151) - Preserve submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings across interruptions, replay, imports, and forks. (#34839, #34777, #35524, #34989, #34664) - Improve terminal responsiveness and rendering, including nonblocking interrupts, keyboard handling, narrow layouts, hyperlinks, and refreshed mention results. (#35000, #35021, #34775, #34778, #35365, #35375) - Fix Windows navigation keys, reliably terminate sandboxed process trees, and preserve proxy settings during security reviews. (#34625, #34624, #35036) - Retain more available skills under tight context budgets and warn when skill catalogs must be truncated. (#34732, #34738, #34997) ## Documentation - Document shared HTTP-client usage, proxy-aware connection pooling, and safe outbound request handling. (#34669) - Clarify Windows drive-letter canonicalization for `PathUri` values. (#34667) ## Chores - Publish release artifacts, channel metadata, and installer aliases through OpenAI-hosted release infrastructure, with GitHub fallback. (#34505, #34508, #34729, #34910) - Sign and notarize bundled macOS helper executables before packaging. (#35264) - Reduce app-server serialization overhead and unnecessary request-building allocations. (#34761, #34766, #34825) - Add enterprise-plan recognition and administrator controls for in-app updates. (#35238, #35537) ## Changelog Full Changelog: rust-v0.145.0...rust-v0.146.0 - #34447 Add a route-aware HTTP client pool @copyberry - #34449 Make external session detection limits configurable @copyberry - #34451 Attribute external agent imports by provider @copyberry - #34463 Support alpha hotfix release versions @copyberry - #34469 Preserve thread settings for goal-first and forked threads @copyberry - #34476 Separate HTTP execution from request logging @copyberry - #34478 Honor `CARGO_HTTP_CAINFO` in managed proxy environments @copyberry - #34479 Re-resolve system proxy routes across redirects @copyberry - #34481 Add route-aware redirect test coverage @copyberry - #34483 Expand route-aware proxy redirect coverage @copyberry - #34490 Route backend requests through the HTTP client factory @copyberry - #34491 Route cloud environment discovery through the HTTP client pool @copyberry - #34495 Honor system proxy settings in the daemon updater @copyberry - #34497 Preserve custom arg0 for sandboxed exec-server processes @copyberry - #34505 Mirror Rust release artifacts to Cloudflare R2 @copyberry - #34506 Respect system proxies during plugin startup sync @copyberry - #34508 Publish release metadata to R2 channels @copyberry - #34509 Honor system proxy settings for remote plugins @copyberry - #34514 Add an optional releases.openai.com installer source @copyberry - #34516 Allow `numer` in codespell checks @copyberry - #34517 Pass empty inherited FDs in the Wine PTY test @copyberry - #34522 Split MCP connection manager into focused modules @copyberry - #34525 Add step-scoped data to extension contributors @copyberry - #34533 Centralize compacted rollout item construction @copyberry - #34540 Detach Git metadata commands from stdin @copyberry - #34544 Size Noise handshake buffers to their messages @copyberry - #34547 Add reciprocal rank fusion skill selection @copyberry - #34550 Test thread-scoped MCP refresh behavior @copyberry - #34551 Simplify TUI restoration for the external editor @copyberry - #34552 Remove unused RtOptions setters @copyberry - #34553 Remove the unused TUI shutdown app command @copyberry - #34558 Remove obsolete ignored tests @copyberry - #34559 Add backend client support for Codex user settings @copyberry - #34561 Extract MCP binding clients from the connection manager @copyberry - #34562 Record rollout boundaries for materialized turns @copyberry - #34563 Page through inherited thread history @copyberry - #34566 Protect fork history references during rollout cleanup @copyberry - #34570 Highlight CUDA files as C++ in the TUI @copyberry - #34573 Accept `forceRefetch` in plugin list requests @copyberry - #34578 Gate the TUI suspend restore helper on Unix @copyberry - #34581 Add routing-card lexical skill selection @copyberry - #34588 Bind MCP calls to captured catalog revisions @copyberry - #34590 Add keyed shell environment policy filters @copyberry - #34597 Enforce exact values from managed config requirements @copyberry - #34598 Skip missing paths in filesystem sandbox entries @copyberry - #34601 Sanitize skill names in injection metrics @copyberry - #34603 Allow explicitly permitted loopback proxy targets @copyberry - #34605 Allow naming sessions with `/new` and `/clear` @copyberry - #34611 Add compatibility policies for skill catalog rendering @copyberry - #34612 Detach non-interactive subprocesses from stdin @copyberry - #34613 Route Windows sandbox proxy traffic by restricting SID @copyberry - #34615 Initialize missing-path behavior in exec-server sandbox test @copyberry - #34620 Add exec-server network policy callback types @copyberry - #34621 Load paginated model context across rollout lineages @copyberry - #34622 Increase the auto-review model override test timeout @copyberry - #34624 Terminate Windows process trees with job objects @copyberry - #34625 Fix Windows TUI navigation key handling @copyberry - #34626 Scale skill metadata budgets with model context windows @copyberry - #34629 Harden Windows elevated sandbox startup @copyberry - #34630 Add a policy-aware HTTP client builder @copyberry - #34631 Migrate agent identity to the shared HTTP client @copyberry - #34636 Keep the TUI open when starting a turn fails @copyberry - #34637 Attribute review findings to repository rules @copyberry - #34640 Update Windows process-tree tests for inherited FDs @copyberry - #34641 Harden managed proxy setup for sandboxed executions @copyberry - #34643 Migrate login HTTP construction to `HttpClient` @copyberry - #34644 Verify Git plugin SHA checkouts @copyberry - #34645 Always assign response item IDs @copyberry - #34649 Propagate resolved proxy policy through auth routing @copyberry - #34650 Require auth managers to receive routing configuration @copyberry - #34651 Migrate core test support to the shared HTTP client @copyberry - #34654 Render turn diffs for foreign environment paths @copyberry - #34655 Honor configured proxy routes for auth refreshes @copyberry - #34664 Preserve approvals reviewer when forking threads @copyberry - #34667 Document `PathUri` drive letter canonicalization @copyberry - #34669 Expand codex-http-client usage guidance @copyberry - #34678 Route LM Studio requests through the shared HTTP client @copyberry - #34681 Add session headers to realtime conversation starts @copyberry - #34687 Configure Codex Auto Review model metadata @copyberry - #34708 Rename the MCP connection manager to `McpConnectionSet` @copyberry - #34713 Order unified exec lifecycle events reliably @copyberry - #34728 Skip Git enrichment for prewarm and Guardian turns @copyberry - #34729 Publish stable installer aliases to R2 @copyberry - #34732 Preserve skill catalog entries under metadata pressure @copyberry - #34733 Make MCP resource clients follow the latest runtime @copyberry - #34734 Remove step-scoped data from extension contributors @copyberry - #34738 Drop skill descriptions before omitting catalog entries @copyberry - #34744 Update skills budget tests for extension API changes @copyberry - #34746 Match core skill ordering in extension catalogs @copyberry - #34747 Register the MCP 2026-07-28 feature flag @copyberry - #34761 Reduce app-server JSON serialization overhead @copyberry - #34763 Retry websocket requests when the previous response is missing @copyberry - #34766 Reduce typed app-server request serialization overhead @copyberry - #34769 Add the git attribution extension @copyberry - #34770 Enable exec-server network policy callbacks @copyberry - #34771 Size unified mention popups to visible results @copyberry - #34772 Normalize whitespace-only lines in agent messages @copyberry - #34775 Clamp session headers to narrow terminal widths @copyberry - #34777 Include the final agent message in turn completion summaries @copyberry - #34778 Coalesce wrapped OSC 8 hyperlinks in the TUI terminal @copyberry - #34779 Use the live parent history mode when forking agents @copyberry - #34781 Upgrade Bazel Rust and LLVM dependencies @copyberry - #34784 Reject dynamic environments named `local` @copyberry - #34785 Report skill catalog truncation during rendering @copyberry - #34786 Simplify app-server integration test setup @copyberry - #34789 Avoid unnecessary post-sampling token estimates @copyberry - #34795 Remove obsolete step store from git attribution tests @copyberry - #34796 Skip syntax highlighting for lines over 4 KiB @copyberry - #34797 Suppress omission notices in core-compatible skill catalogs @copyberry - #34806 Use path URIs in shell approval keys @copyberry - #34808 Centralize SQLite connection configuration @copyberry - #34811 Fix network access rendering in sandbox prompts @copyberry - #34814 Consolidate thread startup around `StartThreadOptions` @copyberry - #34816 Support configurable realtime BEM channel prefixes @copyberry - #34819 Enable git attribution across Codex entry points @copyberry - #34823 Run code-mode tests in non-Windows Bazel CI @copyberry - #34824 Normalize Guardian review cwd reuse keys @copyberry - #34825 Reduce cloning when building Responses requests @copyberry - #34827 Remove Windows Bazel lint toolchain overrides @copyberry - #34831 Flush analytics before in-process app server shutdown @copyberry - #34835 Track compaction time in turn profiles @copyberry - #34839 Preserve user input when MCP startup is interrupted @copyberry - #34840 Add persisted thread pinning to the app server @copyberry - #34844 Remove first-party type from app metadata @copyberry - #34845 Track multi-agent mode in world state @copyberry - #34846 Allow custom providers to opt into standalone web search @copyberry - #34847 Use Guardian model limits for review sessions @copyberry - #34849 Cache remote plugin catalogs by scope @copyberry - #34850 Disable image generation for Free-plan accounts @copyberry - #34851 Use batch metadata for plugin app summaries @copyberry - #34852 Wake sleeping threads for queued agent mail @copyberry - #34877 Wait for local plugin cache refreshes in `plugin/list` @copyberry - #34883 Set a default user agent for MCP HTTP requests @copyberry - #34887 Allow disabling the multi-agent wait tool @copyberry - #34910 Prefer releases.openai.com in standalone installers @copyberry - #34930 Centralize thread MCP state in `McpRuntime` @copyberry - #34931 Use the API plugin marketplace for Amazon Bedrock @copyberry - #34940 Keep session defaults static during config batch writes @copyberry - #34952 Reuse MCP connections across runtime refreshes @copyberry - #34957 Replace closed MCP connections during reconciliation @copyberry - #34959 Handle @ in local marketplace paths @copyberry - #34962 Move MCP connection helpers into the test module @copyberry - #34969 Keep the sleep tool outside code mode @copyberry - #34978 Honor disabled redirects in route-aware HTTP clients @copyberry - #34979 Infer the bundled Claude Code plugin marketplace @copyberry - #34981 Record externally completed agent config imports @copyberry - #34986 Enforce single-writer ownership for paginated threads @copyberry - #34989 Preserve timestamps when importing external agent sessions @copyberry - #34991 Allow omitting MCP tool prefixes per server @copyberry - #34994 Honor the configured SQLite home across state consumers @copyberry - #34995 Initialize execution environments with the final HTTP policy @copyberry - #34996 Separate Codex error details from retry metadata @copyberry - #34997 Warn when skill catalogs exceed their context budget @copyberry - #35000 Make TUI turn interrupts nonblocking @copyberry - #35011 Keep side conversations open when switching threads @copyberry - #35012 Expose remote skill icon URLs through app server @copyberry - #35013 Support incremental replay of updated thread items @copyberry - #35015 Align installed app duration metrics with the legacy baseline @copyberry - #35016 Add trusted plugin script attribution @copyberry - #35020 Attribute command executions to trusted plugin scripts @copyberry - #35021 Adapt keyboard event reporting to the terminal @copyberry - #35023 Route exec-server HTTP through configured proxy policy @copyberry - #35028 Preserve refreshed Apps tools across MCP runtime updates @copyberry - #35029 Preserve plugin attribution across command approvals @copyberry - #35031 Enforce writer ownership for thread archive and deletion @copyberry - #35033 Expose Browser Use requirements through the app server @copyberry - #35034 Route environment registry requests through the shared HTTP client @copyberry - #35036 Preserve Windows sandbox proxy settings in guardian sessions @copyberry - #35048 Track app/read request duration @copyberry - #35049 Register the Guardian V2 feature flag @copyberry - #35054 Allow disabling the update_plan tool @copyberry - #35056 Route exec-server WebSockets through configured proxies @copyberry - #35059 Decouple exec-server HTTP from reqwest types @copyberry - #35063 Track deferred tool namespaces in world state @copyberry - #35065 Avoid duplicating deferred sources in tool search @copyberry - #35067 Fix Bazel test configuration for platform-specific data @copyberry - #35078 Add WebSocket transport to the code-mode host @copyberry - #35098 Support remote code-mode hosts in app-server @copyberry - #35105 Support Agent Plugins manifests @copyberry - #35106 Allow hosts to customize `wait_for_environment` descriptions @copyberry - #35144 Prewarm MCP runtime updates in the background @copyberry - #35146 Refresh MCP runtimes when session auth changes @copyberry - #35151 Reconnect MCP servers on explicit refresh @copyberry - #35164 Encapsulate MCP refresh coordination @copyberry - #35168 Route extension warnings to app-server threads @copyberry - #35172 Compact host skill paths under metadata pressure @copyberry - #35175 Wait for reloaded worker completion in the resume test @copyberry - #35184 Expose executor skills through skill tools @copyberry - #35194 Preserve output from hooks that exit before reading stdin @copyberry - #35196 Make the Apps recovery exposure test deterministic @copyberry - #35198 Enable resource reads for explicit executor skills @copyberry - #35204 Refresh MCP runtimes across thread startup @copyberry - #35205 Use current MCP authority for elicitation reviews @copyberry - #35213 Refresh managed MCP requirements for active threads @copyberry - #35216 Refresh MCP config independently across threads @copyberry - #35220 Support paginated thread forks @copyberry - #35221 Avoid persisting non-local threads for hook transcripts @copyberry - #35238 Support the ent26 enterprise plan @copyberry - #35239 Route MCP auth discovery through runtime HTTP clients @copyberry - #35251 Support ephemeral forks of paginated threads @copyberry - #35254 Expose workspace plugin publish capability @copyberry - #35261 Propagate remote plugin IDs to skill metadata @copyberry - #35262 Track remote plugin IDs in skill invocation analytics @copyberry - #35264 Sign bundled macOS helper binaries @copyberry - #35266 Allow disabling the in-process code-mode host fallback @copyberry - #35267 Harden network approval cancellation and concurrency @copyberry - #35271 Include code-mode tool names in Responses Lite metadata @copyberry - #35275 Trace remote exec-server connection setup @copyberry - #35280 Skip plugin MCP filtering when no allowlists are configured @copyberry - #35359 Handle exec-server network policy requests in the client @copyberry - #35363 Include item start times in completion events @copyberry - #35364 Bound Code Mode metadata compatibility headers @copyberry - #35365 Keep unified mention results fresh @copyberry - #35375 Make the keymap action menu responsive @copyberry - #35408 Ignore generated system skills in the skills watcher @copyberry - #35414 Raise the MCP server recursion limit @copyberry - #35523 Shut down the in-process outbound router explicitly @copyberry - #35524 Preserve terminal turn errors in replayed history @copyberry - #35525 Skip inactive TUI threads without pending user interaction @copyberry - #35530 Track model and personality in world state @copyberry - #35537 Add managed policy for in-app updates @copyberry
## New Features - Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #34386) - Expanded `/import` to migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories. (#31672, #33411, #33426, #33444) - Added experimental Amazon Bedrock login, custom endpoint and authentication support, and GPT-5.6 Sol as the default Bedrock model. (#31327, #33170, #33175, #32288, #33695) - Added audio inputs and tool outputs, including common local audio formats, and introduced streaming realtime V3 conversations. (#33261, #33856, #33932, #34080, #34385) - Stabilized the opt-in multi-agent V2 experience with configurable sub-agent models, reasoning levels, concurrency, restored roles, and improved agent navigation. (#33550, #33631, #33657, #33841, #34383) - Added secure, clickable inline visualization links in the terminal UI. (#33925, #34217, #34346) ## Bug Fixes - Editing an earlier prompt or retrying a safety-buffered turn now creates a contextual branch, preserving the original conversation, attachments, and mention bindings. (#33201, #33207, #33211) - Improved terminal responsiveness for long conversations and streamed output through incremental Markdown rendering, fewer redraws, caching, and bounded command output. (#34045, #34049, #34216, #34223, #34359) - Prevented slow or conflicting MCP startup and authentication flows by enforcing startup timeouts, avoiding blocking OAuth discovery, serializing refreshes, and reusing tool catalogs safely. (#32229, #32781, #32825, #33184, #33297) - Improved Windows execution and sandbox reliability, including native exec-server sandboxing, network-proxy enforcement, hidden helper consoles, and correctly quoted hook commands. (#32849, #32857, #33926, #34423) - Fixed compact release-metadata parsing and macOS code-mode installation, with an in-process fallback when the external code-mode host is unavailable. (#31667, #31876, #31899) - Strengthened safety and approval handling with better forced-`rm` detection, consistent full-access confirmation, and preserved rejection reasons across tools. (#32989, #33464, #34400) ## Documentation - Updated the bundled OpenAI Docs skill with current GPT-5.6 model resolution, prompting, and migration guidance across macOS, Linux, and Windows. (#31842, #33121) ## Chores - Migrated bundled GPT-5.4 selections and internal uses to the corresponding GPT-5.6 Terra and Luna variants. (#33173) - Reduced startup and large-context overhead with concurrent skill/plugin discovery and more efficient remote compaction. (#31566, #33369, #33423, #34431) - Updated the packaged ripgrep binary to 15.2.0. (#34384) ## Changelog Full Changelog: rust-v0.144.0...rust-v0.145.0 - #31667 fix: parse compact release metadata in installer @efrazer-oai - #31362 core: route realtime and memories through HTTP client factory @bolinfest - #31566 perf(skills): reuse walk inventory for host loading @jif-oai - #31576 Bound exec-server process event reordering @jif-oai - #31756 test(skills): assert symlinked metadata loading @jif-oai - #31581 Resolve selected capability roots without starting executors @jif-oai - #31789 Stop persisting RMCP service traces @jif-oai - #31792 Summarize streamed response item logs @jif-oai - #31791 Filter routine Hyper logs from SQLite @jif-oai - #31790 Reduce MCP tool-list trace volume @jif-oai - #31804 Stabilize the memories feature flag @jif-oai - #31803 fix(mcp): default Apps product SKU to codex @alecbarber-oai - #31745 code-mode: retain shared MCP types for deferred tools @sayan-oai - #31672 Import enabled plugins from known marketplaces @charlesgong-openai - #31652 fix(tui): hide empty reasoning summaries @fcoury-oai - #31767 Remove the network proxy config wrapper @jif-oai - #31481 fix: forward originator to Codex Apps MCP @raquel-openai - #31363 codex-api: route file uploads through HTTP client factory @bolinfest - #31813 tui: update safety buffering copy @etraut-openai - #31830 fix(sandboxing): initialize network proxy config inline @fcoury-oai - #31431 build: ratchet direct reqwest dependencies @bolinfest - #31876 code-mode: fix installation on darwin @cconger - #31842 Update bundled OpenAI Docs skill for GPT-5.6 @kkahadze-oai - #31637 login: route raw auth flows through HTTP client @bolinfest - #31686 [codex-apps] Filter optional file fields by tool schema @tsarlandie-oai - #31899 code-mode: fall back to using in process v8 if we fail to resolve external process @cconger - #31805 Bound remote MCP stdio lines @jif-oai - #30293 Resolve and pin MCP OAuth credential stores @stevenlee-oai - #31892 exec-server: materialize filesystem workspace roots @pakrym-oai - #31327 feat: add managed Bedrock login API @celia-oai - #31295 bench: add codex help e2e macrobenchmark @anp-oai - #31428 bench: add e2e benchmark entrypoints @anp-oai - #31937 exec-server: expose process helper to outer sandbox @pakrym-oai - #32093 Remove the legacy exec policy engine @copyberry - #32106 Reduce startup latency for ancestor discovery @copyberry - #32112 Bound streamed exec-server HTTP response bodies @copyberry - #32122 Test the shared exec-server HTTP response byte budget @copyberry - #32123 Bound exec-server stdio JSON-RPC messages @copyberry - #32126 Test bounded concurrency in ancestor discovery @copyberry - #32134 Test stdio JSON-RPC size limits with LF and CRLF @copyberry - #32135 Propagate tracing subscribers to exec start tasks @copyberry - #32150 Keep unified exec output collection bounded @copyberry - #32193 Validate memory consolidation artifacts before succeeding @copyberry - #32197 Rebind memory consolidation workspace roots @copyberry - #32200 Add a skill invocation extension contributor @copyberry - #32206 Always send reasoning parameters in Responses requests @copyberry - #32213 Generate unique IDs for review rollout messages @copyberry - #32214 Propagate workspace roots to exec-server sandboxes @copyberry - #32229 Serialize MCP OAuth credential refreshes @copyberry - #32231 Support pending remote environment registration @copyberry - #32232 Let permission hooks resolve strict auto-review requests @copyberry - #32234 Add dedicated storage for paginated thread history @copyberry - #32246 Extract reverse JSONL scanning from session indexing @copyberry - #32256 Improve Responses WebSocket timing telemetry @copyberry - #32261 Preserve local path conventions in automatic approvals @copyberry - #32263 Include start times in terminal turn events @copyberry - #32272 Expose scheduled tasks in plugin details @copyberry - #32274 Remove the personality migration @copyberry - #32276 Repair unterminated rollout files before appending @copyberry - #32277 Honor `personality = "none"` in model instructions @copyberry - #32280 Include terminal errors in turn completion events @copyberry - #32286 Clarify waiting behavior in safety buffering prompts @copyberry - #32288 Make GPT-5.6 Sol the default Bedrock model @copyberry - #32289 Persist paginated items in the local thread store @copyberry - #32290 Respect model support for reasoning summaries @copyberry - #32301 Trust hooks from materialized workspace plugins @copyberry - #32302 Prefer the Codex home socket for Unix IDE context @copyberry - #32305 Improve file blob upload diagnostics @copyberry - #32312 Require prefixes for outbound response item IDs @copyberry - #32316 Stop falling back to older model availability announcements @copyberry - #32326 Use canonical links in the moved config notice @copyberry - #32332 Add ordinals to paginated rollout records @copyberry - #32441 Preserve parent sandbox enforcement for memory consolidation @copyberry - #32460 Emit thread-idle lifecycle after guardian interrupts @copyberry - #32461 Expand tabs when rendering TUI diffs @copyberry - #32485 Use available width for skill names in the toggle view @copyberry - #32628 Improve composer completion target resolution @copyberry - #32698 Extract connector runtime snapshot management @copyberry - #32744 Log missing personality messages at trace level @copyberry - #32746 Make advanced reasoning selection explicit in the TUI @copyberry - #32747 Align Guardian reviews with session configuration @copyberry - #32749 Expose model overrides for multi-agent v2 spawns @copyberry - #32751 Restrict spawned-agent models to the active backend @copyberry - #32761 Add shadow metrics for lexical skill selection @copyberry - #32768 Align shadow skill selection with observable sources @copyberry - #32780 Enable skill search shadow selection by default @copyberry - #32781 Apply MCP startup timeouts during client creation @copyberry - #32801 Refactor OAuth store lock contention tests @copyberry - #32822 Make explicit multi-agent mode override proactive delegation @copyberry - #32825 Avoid blocking thread startup on MCP OAuth discovery @copyberry - #32835 Forward turn metadata in standalone web search @copyberry - #32837 Restore V2 agent identities on root thread resume @copyberry - #32838 Reap exited PID-managed app-server children @copyberry - #32844 Expand millisecond duration histogram boundaries @copyberry - #32849 Hide Windows filesystem helper console windows @copyberry - #32857 Require the elevated Windows sandbox for network proxies @copyberry - #32858 Persist slash-command popup dismissal @copyberry - #32864 Coalesce concurrent Windows sandbox setup requests @copyberry - #32866 Allow responses after image generation @copyberry - #32867 Include connector IDs in MCP tool call analytics @copyberry - #32875 Use model catalog policies for Guardian auto review @copyberry - #32881 Broaden remote compaction model fallback @copyberry - #32884 Prepare external agent migration for source adapters @copyberry - #32887 Tag shell tool telemetry by command category @copyberry - #32891 Attach connector caches to diagnostic uploads @copyberry - #32894 Serialize plugin install requests @copyberry - #32896 Load model context from a bounded rollout suffix @copyberry - #32897 Route blocked network requests to their owning calls @copyberry - #32898 Expose structured standalone web search results @copyberry - #32899 Add exec-server environment status checks @copyberry - #32900 Derive collaboration settings from turn context @copyberry - #32903 Include session IDs in tool item analytics events @copyberry - #32905 Timestamp app-server notifications at emission @copyberry - #32911 Allow injecting the models manager into `ThreadManager` @copyberry - #32920 Expose environment status through app-server @copyberry - #32923 Materialize paginated thread history in SQLite @copyberry - #32928 Resume thread history projection from its SQLite checkpoint @copyberry - #32945 Restrict Guardian reviewer tools @copyberry - #32949 Tighten recommended plugin install suggestions @copyberry - #32952 Scope runtime workspace roots to execution environments @copyberry - #32985 Expose exact per-response usage in raw app-server events @copyberry - #32989 Always confirm before enabling full access @copyberry - #33013 Bound exec-server JSON-RPC decoding complexity @copyberry - #33026 Include raw response completions in TypeScript envelopes @copyberry - #33030 Remove task messages from `list_agents` output @copyberry - #33031 Preserve JSON number precision in exec-server RPC messages @copyberry - #33035 Use session IDs for prompt cache keys @copyberry - #33040 Send plugin analytics with API key authentication @copyberry - #33076 Add an agent extension runner @copyberry - #33093 Preserve streamed output during capped history replay @copyberry - #33105 Fix TUI status visibility around streamed output @copyberry - #33107 Preserve special filesystem subpaths as wire strings @copyberry - #33109 Reject forks of paginated threads @copyberry - #33113 Allow injecting the Codex Apps tools cache @copyberry - #33121 Refine GPT-5.6 prompting and migration guidance @copyberry - #33147 Support model catalog permission messages @copyberry - #33149 Build MCP tool runtimes before router planning @copyberry - #33150 Clarify exec yield timing on Windows @copyberry - #33152 Support paginated thread history in app-server list APIs @copyberry - #33155 Trace startup prewarm tasks @copyberry - #33156 Run detached reviews as review-agent turns @copyberry - #33159 Move sleep items to the extension-owned lifecycle path @copyberry - #33166 Defer Noise environment connections until registration @copyberry - #33167 Document the Windows exec yield time range @copyberry - #33170 Support Amazon Bedrock login in the app server @copyberry - #33173 Migrate GPT-5.4 uses to GPT-5.6 variants @copyberry - #33175 Handle Amazon Bedrock credentials during logout @copyberry - #33177 Support model catalog templates for Guardian policy prompts @copyberry - #33180 Serialize concurrent MCP stdin writes @copyberry - #33182 Preserve plugin install failure subtypes during imports @copyberry - #33184 Reuse MCP tool catalogs across sessions @copyberry - #33185 Keep approval test targets in the temporary home @copyberry - #33187 Honor workspace spend controls in rate-limit handling @copyberry - #33198 Keep interrupted prompts in conversation history @copyberry - #33200 Separate exec permission paths from core models @copyberry - #33201 Branch conversations when editing earlier TUI prompts @copyberry - #33203 Preserve in-flight state when restoring thread input @copyberry - #33207 Retry safety-buffered turns on a forked thread @copyberry - #33209 Separate session state from session I/O @copyberry - #33211 Preserve thread context when retrying or editing turns @copyberry - #33213 Prepare Python SDK 0.144.4 stable release @copyberry - #33223 Instrument environment and plugin resolution paths @copyberry - #33232 Disambiguate skill mentions from shell parameters @copyberry - #33237 Fix skill completion around bound mentions with suffixes @copyberry - #33239 Render TUI composer tabs as single-column spaces @copyberry - #33243 Add auto-compaction fallback token-budget settings @copyberry - #33251 Report selected environment connection transitions @copyberry - #33255 Add a fallback phase before automatic context rollover @copyberry - #33261 Add Frameless Bidi support for realtime conversations @copyberry - #33297 Allow MCP servers to opt out of tool catalog caching @copyberry - #33308 Expand MCP tool catalog cache regression coverage @copyberry - #33364 Enable paginated thread history in app-server @copyberry - #33367 Respect final-answer boundaries for queued agent mail @copyberry - #33369 Scan skill roots concurrently @copyberry - #33373 Render TUI prompts before submitting user turns @copyberry - #33411 Migrate plugin commands into skills on install @copyberry - #33412 Refactor world-state rendering tests into snapshots @copyberry - #33414 Expose connector candidates from imported sessions @copyberry - #33421 Fetch workspace connectors concurrently @copyberry - #33423 Load executor plugin declarations concurrently @copyberry - #33424 Attribute OpenAI docs MCP requests to Codex @copyberry - #33425 Refresh host skill catalogs through world state @copyberry - #33426 Add Cursor support to setup import @copyberry - #33427 Propagate deferred environment capability roots to MCP @copyberry - #33430 Avoid creating metadata paths in the Windows sandbox @copyberry - #33432 Preserve paginated history for spawned subagents @copyberry - #33435 Warn on conflicting capability root locations @copyberry - #33441 Shut down Codex threads after approval scenarios @copyberry - #33444 Add external agent memory migration @copyberry - #33445 Select the elevated Windows sandbox for network proxies @copyberry - #33446 Remove the unused network proxy loader @copyberry - #33454 Track prompt cache write token usage @copyberry - #33456 Move external agent migration into its crate @copyberry - #33457 Use final answers in turn history summaries @copyberry - #33459 Allow more time for image generation in code mode @copyberry - #33464 Strengthen forced `rm` command detection @copyberry - #33467 Remove template IDs from MCP tool call metadata @copyberry - #33500 Add cache-write tokens to the raw response schema @copyberry - #33509 Preserve encrypted content in MCP tool outputs @copyberry - #33550 Unify multi-agent settings under `agents` @copyberry - #33572 Expose spawn agent types only when roles are configured @copyberry - #33605 Add fielded BM25 to shadow skill selection @copyberry - #33613 Add character n-gram skill selection @copyberry - #33614 Add multi-query lexical skill selection @copyberry - #33631 Honor configured model defaults for spawned agents @copyberry - #33632 Remove generated-default filesystem path variants @copyberry - #33633 Clarify when to wait for starting environments @copyberry - #33636 Clarify when to wait for starting environments @copyberry - #33639 Remove the unused realtime WebRTC crate @copyberry - #33640 Avoid duplicate cached app list update notifications @copyberry - #33645 Run `write_stdin` concurrently across terminal sessions @copyberry - #33651 Add an app-server API for reading app metadata @copyberry - #33656 Validate reasoning effort after applying spawn roles @copyberry - #33657 Restore agent roles when reloading v2 sub-agents @copyberry - #33658 Keep active-turn environments stable across settings updates @copyberry - #33659 Require data URLs for code-mode image output @copyberry - #33665 Refresh step world state for all sessions @copyberry - #33677 Forward thread originators from standalone extensions @copyberry - #33680 Reword the apply_patch tool description @copyberry - #33683 Preserve scope and provenance for imported agent memory @copyberry - #33684 Extract TUI approval request payloads into structs @copyberry - #33687 Avoid unnecessary writes during migration repair @copyberry - #33695 Support custom transports for Amazon Bedrock @copyberry - #33841 Make parent-owned sub-agent threads read-only in the TUI @copyberry - #33842 Give the zsh fork decline test more execution time @copyberry - #33843 Add an API for reading installed app runtime state @copyberry - #33845 Confirm usage-limit resets before redemption @copyberry - #33848 Fix the managed Bedrock logout test assertion @copyberry - #33851 Record web search result payload sizes @copyberry - #33852 Add batched executor capability discovery @copyberry - #33855 Tag realtime transcript tail flush delegations @copyberry - #33856 Stream realtime V3 Codex handoff output @copyberry - #33858 Isolate core tests from shell and rollout persistence @copyberry - #33861 Test workspace write isolation across exec servers @copyberry - #33862 Suppress empty multi-agent mode messages @copyberry - #33863 Report detailed session import error types @copyberry - #33864 Keep feature tests focused on behavior @copyberry - #33866 Remove the redundant tool dispatch wrapper @copyberry - #33867 Add grace period to code-mode yield timeouts @copyberry - #33868 Remove stale ignored core tests @copyberry - #33870 Remove the redundant borrowed line wrapping helper @copyberry - #33872 Remove unused TUI collaboration mode indicators @copyberry - #33876 Track collaboration mode instructions in world state @copyberry - #33883 Report CLI as the external agent config import source @copyberry - #33889 Centralize thread MCP connections in `McpRuntime` @copyberry - #33892 Limit rollout metadata reads to headers @copyberry - #33893 Track realtime conversation state in world state @copyberry - #33895 Add SessionEnd hooks for thread teardown @copyberry - #33896 Expose plugin installation interstitial requirements @copyberry - #33901 Support ChatGPT-branded Desktop app builds @copyberry - #33902 Add bounded batch lookups for message history @copyberry - #33903 Route realtime V3 handoffs by response channel @copyberry - #33905 Batch persistent history reads during reverse search @copyberry - #33906 Launch managed network proxies on remote executors @copyberry - #33907 Add occurrence search for paginated threads @copyberry - #33908 Allow publishing plugins through share updates @copyberry - #33921 Preserve sub-agent liveness in the agent picker @copyberry - #33922 Allow selecting path-backed agents in the TUI picker @copyberry - #33923 Add audio variants to user input protocols @copyberry - #33925 Render inline visualization links in the TUI @copyberry - #33926 Fix quoted hook commands on Windows @copyberry - #33929 Handle audio inputs and Bazel unit test arguments @copyberry - #33930 Track inherited paginated rollout prefixes @copyberry - #33932 Forward audio inputs to the Responses API @copyberry - #33938 Centralize SQLite connection configuration @copyberry - #33944 Track permission instructions in world state @copyberry - #33950 Let users remember the working directory for resumed sessions @copyberry - #33961 Refresh bundled model metadata @copyberry - #33963 Add context to sampling retry logs @copyberry - #33982 Gate audio history by model input modalities @copyberry - #34038 Handle compressed rollouts in doctor thread inventory @copyberry - #34045 Render streamed Markdown incrementally @copyberry - #34047 Avoid resending the model for reasoning shortcuts @copyberry - #34049 Avoid redundant TUI redraws while streaming @copyberry - #34067 Seed realtime V3 sessions with initial text items @copyberry - #34080 Add audio output support to dynamic tools and code mode @copyberry - #34085 Support legacy views for paginated thread history @copyberry - #34194 Avoid cloning thread data when rendering transcripts @copyberry - #34197 Use the Markdown collector as the streaming source of truth @copyberry - #34198 Start side conversations without replaying inherited turns @copyberry - #34199 Avoid liveness races when starting side conversations @copyberry - #34204 Avoid cloning buffered TUI history lines @copyberry - #34206 Avoid retaining decoded MCP images in history cells @copyberry - #34216 Speed up TUI Markdown layout @copyberry - #34217 Keep incremental rendering with visualization context @copyberry - #34218 Track TUI command completion separately from output @copyberry - #34222 Avoid buffering replay-irrelevant thread notifications @copyberry - #34223 Cache finalized Markdown history rendering @copyberry - #34224 Avoid cloning file changes in TUI diff rendering @copyberry - #34226 Backfill completion items only for the active exec turn @copyberry - #34229 Persist names for paginated threads @copyberry - #34232 Remeasure dynamic cells in the transcript overlay @copyberry - #34234 Avoid redundant TUI subagent metadata requests @copyberry - #34271 Migrate legacy exec policy allow rules @copyberry - #34293 Preserve zsh tied PATH exports in shell snapshots @copyberry - #34344 Reject unsupported history modes when loading rollouts @copyberry - #34345 Remove unused Rust helpers @copyberry - #34346 Track inline visualization directives during streaming @copyberry - #34347 Avoid cloning deferred TUI lifecycle payloads @copyberry - #34348 Cache TUI flex heights across frame passes @copyberry - #34355 Parallelize TUI bootstrap requests @copyberry - #34357 Render streamed command output through preview iterators @copyberry - #34359 Keep streamed command output bounded in the TUI @copyberry - #34361 Avoid cloning thread history for token usage replay @copyberry - #34365 Animate Max and Ultra reasoning effort changes @copyberry - #34366 Avoid cloning hyperlink text during TUI rendering @copyberry - #34368 Use app-server skill metadata directly in the TUI @copyberry - #34371 Clear stale Guardian reviews when turns end @copyberry - #34375 Extend second-based latency histogram buckets @copyberry - #34378 Avoid rendering generated images twice @copyberry - #34380 Stop retrying turns with invalid tool images @copyberry - #34381 Avoid cloning Responses WebSocket payloads @copyberry - #34382 Keep paginated thread Git metadata in SQLite @copyberry - #34383 Mark multi-agent v2 as stable @copyberry - #34384 Update packaged ripgrep to 15.2.0 @copyberry - #34385 Preserve audio across history and tool outputs @copyberry - #34386 Enable memories for paginated threads @copyberry - #34387 Refresh bundled model metadata @copyberry - #34389 Route Codex Apps MCP through plugin service @copyberry - #34390 Use copy-on-write storage for history snapshots @copyberry - #34392 Ignore inherited ACEs when refreshing Windows write roots @copyberry - #34393 Add configurable hook context spill limits @copyberry - #34396 Run compact session-start hooks before turn continuation @copyberry - #34400 Propagate approval rejection reasons @copyberry - #34403 Update tests for history and hook API changes @copyberry - #34407 Resolve paginated rollout lineages @copyberry - #34408 Support threadless MCP connections without event channels @copyberry - #34409 Limit the Linux `/proc` preflight filesystem view @copyberry - #34411 Require absolute paths for test SQLite configuration @copyberry - #34413 Remove CSV-backed agent jobs @copyberry - #34416 Show completed hook warnings in TUI headers @copyberry - #34417 Enrich app/read connector metadata @copyberry - #34423 Support Windows sandboxing in the exec server @copyberry - #34429 Move shared skill models into `codex-skills` @copyberry - #34431 Optimize remote compaction history handling @copyberry - #34434 Support catalog messages for non-request approval policies @copyberry - #34435 Resolve outbound proxy routes explicitly @copyberry - #34436 Honor managed permission profiles in network proxy resolution @copyberry - #34438 Increase the patch approval test timeout @copyberry - #34441 Add buffered code-mode exec yields @copyberry
## Bug Fixes - Refreshed bundled instructions for GPT-5.6 Sol, Terra, and Luna, and corrected their context windows to 272,000 tokens. (#33972, #34009) ## Changelog Full Changelog: rust-v0.144.5...rust-v0.144.6 - #33972 Backport refreshed bundled model metadata to 0.144 @sayan-oai - #34009 Narrow 0.144 hotfix to GPT-5.6 prompts and context @sayan-oai
## Bug Fixes - Improved dangerous-command detection, including more forced `rm` forms, and provides clearer rejection reasons when commands are denied. (#33455) ## Changelog Full Changelog: rust-v0.144.4...rust-v0.144.5 - #33455 [release/0.144] fix(core) expand is_dangerous_command @dylan-hurd-oai
## Chores - No user-facing changes in this patch release. ## Changelog Full Changelog: rust-v0.144.3...rust-v0.144.4
## Bug Fixes - Restored the previous Guardian auto-review policy, request format, and tool behavior after rolling back a prompting regression. (#32672) ## Changelog Full Changelog: rust-v0.144.1...rust-v0.144.2 - #32672 [release/0.144] Revert "Update auto review prompting" @dylan-hurd-oai
## Chores - Published a version-only release with no merged pull request changes since `rust-v0.144.2`. ## Changelog Full Changelog: rust-v0.144.2...rust-v0.144.3
## New Features - Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (#30488) - Added a `writes` app-approval mode that allows declared read-only actions while prompting for writes. (#30482) - MCP tools can now request authentication interactively without an experimental opt-in. (#28772) - App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (#28745, #31274) - Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (#31503) - Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (#31621) ## Bug Fixes - Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (#30319) - Fixed Code Mode crashes in Intel macOS release binaries. (#30953) - Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (#31138, #31574) - Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (#31494) - Long-running app sessions now refresh expired authentication for the hosted `codex_apps` connector. (#31486) - Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (#31441, #31622) ## Documentation - Device-code login warnings now explain how to recognize and stop phishing attempts. (#31648) ## Chores - Reduced plugin skill-loading time on remote executors by resolving namespaces once per root. (#31348) - Made the `/review` branch picker faster and more reliable in large repositories. (#31464) - Improved automatic review behavior with clearer instructions and a focused tool set. (#31480) - Made Amazon Bedrock model names clearly identify their GPT-5.6 family and variant. (#31636) ## Changelog Full Changelog: rust-v0.143.0...rust-v0.144.0 - #30292 Serialize shared MCP OAuth credential stores @stevenlee-oai - #30488 [codex-cli] Show reset details in redemption picker @jayp-oai - #31297 feat(core): emit canonical command execution items @owenlin0 - #31298 feat(core): emit canonical dynamic tool call items @owenlin0 - #31369 test(skills): cover plugin namespace loading @anp-oai - #30953 fix(release): add missing Intel V8 signing entitlement @malsamiri-oai - #31355 refactor: make ExternalAuth return CodexAuth @lt-oai - #31352 ci: increase Windows Bazel local test jobs @anp-oai - #30482 [codex-rs] Add writes app approval mode @zamoshchin-openai - #31439 Handle bio policy errors in Codex @fc-oai - #31319 [codex] add connector runtime latency metrics @mzeng-openai - #31312 Use model catalog approval messages @dylan-hurd-oai - #31422 test: generalize exec-server fixture @anp-oai - #28772 [codex] Enable auth elicitation by default @mzeng-openai - #28745 [login] support hosted success redirects @rafael-jac - #31316 chore: extract remote compaction request attempts @celia-oai - #31299 feat(core): emit canonical sub-agent activity items @owenlin0 - #31285 [1/5] [codex] sync managed-layer bundle schema @hefuc-oai - #31300 feat(core): emit canonical collab tool call items @owenlin0 - #31301 feat(core): emit canonical collab wait items @owenlin0 - #30319 fix: retry rejected previous-model compaction with selected model @celia-oai - #30879 Handle mixed-case URLs in Windows command safety @charliemarsh-oai - #31191 Handle completion separators and popup dismissal @charliemarsh-oai - #31425 test: add TestAppServer builder @anp-oai - #31342 http-client: expose WebSocket proxy prerequisites @bolinfest - #31348 perf(skills): resolve plugin namespaces per root @anp-oai - #31289 Use canonical indexed web access field @winston-openai - #31464 Speed up review branch picker via `for-each-ref` @charliemarsh-oai - #31332 ci: parameterize Cargo target paths @anp-oai - #31421 refactor: unify external auth resolution @pakrym-oai - #31451 test: migrate TestAppServer callers to builder @anp-oai - #31274 [codex] Add externally provided Codex auth @lt-oai - #31501 trace hook command execution @wiltzius-openai - #31356 ci: run V8 source builds on Windows 2025 @anp-oai - #31283 core: support extension-owned turn items @owenlin0 - #31570 fs: support pruning hidden directories during walks @jif-oai - #31465 Align empty branch list message with search @charliemarsh-oai - #31586 Stabilize encrypted MAv2 spawn request test @jif-oai - #31585 Stabilize remote compaction parity against dynamic skill catalogs @jif-oai - #31518 Log plugin install failure subtypes @charlesgong-openai - #31587 Stabilize shared rollout budget test @jif-oai - #31503 Detect Codex installs managed by pnpm @charliemarsh-oai - #31525 core: migrate standalone web search to extension-owned turn items @owenlin0 - #31473 feat(core): emit canonical review mode items @owenlin0 - #31452 test: remove TestAppServer constructors @anp-oai - #31612 Round MCP timeout durations in error messages @jif-oai - #31138 fix(windows-sandbox): allow deletion in writable roots @fcoury-oai - #31500 code-mode: move to hosted mode by default @cconger - #31494 tui: sanitize terminal controls in user messages @etraut-openai - #31524 chore(protocol): use UUIDv7 for generated item IDs @owenlin0 - #31496 Fall back to HTTP when Apple Git is unavailable @fc-oai - #31578 Bound exec-server pending RPCs @jif-oai - #29875 [codex] Sanitize imported session fallback titles @stefanstokic-oai - #31621 tui: warn on Ultra with high multi-agent concurrency @shijie-oai - #31622 websocket-client: add proxy-aware connector @bolinfest - #31574 [codex] Grant Windows sandbox access to primary runtime @abhinav-oai - #31292 Reuse MCP tool snapshot within a sampling request @sayan-oai - #31630 feat(core): emit canonical hook prompt items @owenlin0 - #31636 feat: change amazon Bedrock GPT-5.6 display names @celia-oai - #31629 core: stop emitting legacy command events directly @owenlin0 - #31441 core: preserve Responses WebSockets with system proxy @bolinfest - #31357 ci: route build IO through Dev Drives @anp-oai - #31461 chore: remove inert cargo audit workflow @anp-oai - #31614 test: migrate app-server v2 starts to auto env @anp-oai - #31497 [codex] increase tool schema compaction threshold @fbauer33 - #31650 code-mode: make all approvals trigger elicitation pause @cconger - #31648 Clarify device-code phishing warning @etraut-openai - #31663 test(app-server): use native rollout fixture paths @fcoury-oai - #31330 [codex-apps] Omit internal fields from file payloads @jacobzhou-oai - #31480 Update auto review prompting @olliem-oai - #21818 Update models.json @github-actions - #31427 test: add delayed exec-server transport @anp-oai - #30278 [codex] Preserve reviewer when resuming threads @viyatb-oai - #31675 Expand agent core ownership @pakrym-oai - #31486 [connectors] Refresh codex_apps /ps/mcp auth @stevenlee-oai - #31361 model-provider: route model discovery through HTTP client factory @bolinfest - #30188 feat(rollout): persist TurnItems for paginated thread rollouts @owenlin0 - #31596 Use the image generation extension by default @won-openai - #31684 Update models.json @github-actions
## Bug Fixes - Fixed standalone installs failing when GitHub returns compact or reordered release metadata. (#31913) - Ensured macOS package installs expose the code-mode host alongside the `codex` executable. (#31913) - Kept code mode working when the companion host binary is unavailable by falling back to the embedded runtime. (#31913) ## Changelog Full Changelog: rust-v0.144.0...rust-v0.144.1 - #31913 [0.144] Backport installer and code-mode reliability fixes @bolinfest
## New Features - Remote plugins are now enabled by default, with richer catalog rows, npm marketplace sources, and visible remote/local versions. (#30297, #26705, #29375, #30981) - Codex can route authentication and Responses API traffic through macOS and Windows system proxies, including PAC and WPAD configurations. (#26708, #26709, #31335) - Added `codex remote-control pair` for generating manual pairing codes from a running daemon. (#29913) - Added Amazon Bedrock GPT-5.6 Sol, Terra, and Luna models, with first-class support for `max` reasoning effort. (#30285, #30467) - MCP tools now use tool search by default, and ChatGPT-hosted MCP servers can explicitly use session authentication. (#29486, #29733) - App-server clients can inspect environments, list descendant threads, and fork history through a specific turn. (#30291, #29591, #30277) ## Bug Fixes - Fixed Windows ConPTY input handling for line endings and backspace, plus sandbox credential retry edge cases. (#29734, #29624, #29637) - Fixed stale TUI safety prompts and cancelled reviews that could leave MCP startup appearing busy. (#30490, #31189) - Improved recovery when exec servers are temporarily offline and prevented remote-control token refresh retry storms. (#30098, #30201) - Preserved trailing realtime transcript text and terminal rollout events during shutdown. (#29918, #30144) - Improved incremental WebSocket request success by ignoring response metadata during comparisons. (#30770) - Reduced installer failures from GitHub API rate limits by reusing release metadata. (#31056) ## Documentation - Documented UUID7 thread and turn IDs, plus recommended remote-executor integration-test workflows. (#27714, #29790) ## Chores - Updated OpenSSL, Hono, fast-uri, quick-xml, and crossbeam-epoch to address security advisories. (#29487, #29650, #30941, #31308) ## Changelog Full Changelog: rust-v0.142.0...rust-v0.143.0 - #26708 PAC 3 - Add Windows system proxy resolver @canvrno-oai - #28769 Register full CDP requirements feature @syuan-oai - #29485 [codex] fetch featured IDs for remote plugins @ericning-o - #29487 Upgrade bundled OpenSSL to 3.6.3 @jif-oai - #29489 [codex] Update esbuild to 0.28.1 @pakrym-oai - #29488 [plugins] Add dark-mode logo metadata @drewschuster-openai - #29249 [codex] migrate environment context to model world state @pakrym-oai - #29494 core: wrap token budget window context @bolinfest - #29417 [codex] replace remote images with model-visible error text @rka-oai - #28360 feat(core): store turn_id on ResponseItem metadata @owenlin0 - #29486 [codex] Use tool search for MCP tools by default @sayan-oai - #29501 path-uri: clarify host-native path conversion @anp-oai - #29504 fix: world state response item test @celia-oai - #26704 TUI Plugin Sharing 4 - cover remote plugin catalog flows @canvrno-oai - #29419 [codex] reject remote images at app-server ingress @rka-oai - #28992 chore: improve expired Bedrock credential errors @celia-oai - #29467 Make formatter output quiet on success @anp-oai - #26709 PAC 4 - Add macOS system proxy resolver @canvrno-oai - #29490 chore: warn when Code Mode lacks model metadata @celia-oai - #29493 mcp: accept foreign absolute cwd for remote stdio @anp-oai - #29473 Propagate safety buffering treatment metadata @fc-oai - #24092 [codex] Reject unlowered PowerShell AST regions @bookholt-oai - #29155 [codex] Expose service tier and reasoning effort in OTEL @daniel-oai - #29068 [codex] stylistic changes @rka-oai - #29518 Remove redundant Codex Apps manager flag @aibrahim-oai - #27946 [codex] Use input items for Responses Lite tools @rka-oai - #29528 Centralize Codex Apps client handling @aibrahim-oai - #29577 Handle additional tools in image URL validation @aibrahim-oai - #29575 Remove redundant Codex Apps cache guard @aibrahim-oai - #29583 Group Codex Apps client setup @aibrahim-oai - #29358 Allow codex sandbox to consume MCP sandbox state @jif-oai - #29599 Stop persisting bridged log events @jif-oai - #29615 Fix Codex Apps auth elicitation hang @jif-oai - #29067 Namespace multi-agent v2 tools under collaboration @jif-oai - #29614 path-uri: add lexical containment @jif-oai - #28426 Share resumed rollout history @charliemarsh-oai - #29634 Update rmcp to 1.8.0 @jif-oai - #29650 Update vulnerable Hono and fast-uri dependencies @jif-oai - #29498 [codex] Instrument rollout persistence bytes @wiltzius-openai - #29659 [core] debounce current-time reminders by elapsed time @rka-oai - #29608 Shut down superseded MCP managers on refresh @jif-oai - #29527 core: use turn-owned world state for inline compaction @sayan-oai - #29672 [codex] Handle additional tools in rollout persistence metrics @rka-oai - #29669 Handle additional tools in rollout persistence metrics @winston-openai - #29680 Revert "Handle additional tools in rollout persistence metrics" @rasmusrygaard - #27714 app-server: document thread and turn IDs are UUID7 @owenlin0 - #29456 Prepare managed network sandbox context @jif-oai - #28418 chore(core) rm AskForApproval::OnFailure @dylan-hurd-oai - #29675 core: add extra metadata field to Thread struct @kumquatexpress - #29013 Keep managed MITM CA private keys in proxy memory @winston-openai - #29495 Separate local and remote plugin analytics IDs @jameswt-oai - #29671 [codex] Preserve proxy state for filesystem sandbox helpers @iceweasel-oai - #29513 [codex] allow image generation with provider auth @richardopenai - #29526 core: resolve view_image paths in selected environment @anp-oai - #29696 [codex] Fix stale approval policy in MCP test @sayan-oai - #29704 [codex] Fix stale approval policy in MCP test @kumquatexpress - #29547 core: use current step environments for tools @sayan-oai - #28976 Add MCP tool call error metrics @stevenlee-oai - #27045 feat(guardian): include connected account email in app reviews @viyatb-oai - #29620 Decouple plugin manifest path resolution @jif-oai - #29666 [codex] Report the exec-server working directory @rasmusrygaard - #29705 feat(app-server): thread/turns/items/list -> thread/items/list @owenlin0 - #29716 code-mode: Rename codex_code_mode::CodeModeService @cconger - #29712 test: branch on target OS instead of runner flavor @anp-oai - #29728 core tests: rename automatic environment builder @anp-oai - #29158 path-uri: remove legacy path deserialization @anp-oai - #29519 core: persist initial context window metadata @bolinfest - #28918 Make selected plugin roots URI-native @jif-oai - #29515 [codex] define code mode host handshake protocol @cconger - #29715 [codex] surface rollout budget exhaustion @rka-oai - #29732 code-mode: Remove Session::is_alive() @cconger - #29626 Load executor skills without host path conversion @jif-oai - #29714 protocol: separate app and exec RPC ownership @anp-oai - #29664 refactor: extract context window token status @bolinfest - #29665 fix: scope context remaining to body window @bolinfest - #29744 [codex] rename rollout budget error to session budget error @rka-oai - #29739 Update new_context_window instructions @andmis - #29743 core: reset context for token budget compaction @bolinfest - #29477 Support thread-level originator overrides @alexsong-oai - #29745 core: add wait_for_environment for starting environments @sayan-oai - #28630 [codex] trace MCP startup latency @rphilizaire-openai - #29750 chore: assign `amsg_` IDs to agent messages @bolinfest - #29746 test: add app-server auto environment helper @anp-oai - #29711 Let image generation extension hosts control output persistence @won-openai - #29762 [codex] Reuse compacted history replacement for new context windows @pakrym-oai - #29768 [codex] Update bundled skill installer guidance @sayan-oai - #29690 [plugins] Add marketplace source requirements @xl-openai - #29765 [codex] Ignore local curated plugins when remote catalog is active @xl-openai - #29767 [codex] Assign response item IDs in forked history @pakrym-oai - #29721 auth: move domain mode below app wire types @anp-oai - #29753 [plugins] Enforce marketplace source admission requirements @xl-openai - #29722 config: own layer provenance types @anp-oai - #29723 connectors: own app metadata types @anp-oai - #29788 test: run app-server integration tests under Wine @anp-oai - #29789 test: use automatic environments in app-server integration tests @anp-oai - #29790 docs: document remote executor integration testing @anp-oai - #29815 [codex] Remove auto-compaction opt-out @rhan-oai - #29628 Keep executor plugin MCP paths URI-native @jif-oai - #29731 [codex] Emit implicit skill usage for support reads @alexsong-oai - #29829 Persist agent messages as response items @jif-oai - #29841 Add a bounded filesystem walk RPC @jif-oai - #29842 Use fs/walk for environment skill discovery @jif-oai - #29567 [codex] show external import result counts @charlesgong-openai - #29831 Cache plugin namespace during executor skill discovery @jif-oai - #29720 ci: fail jobs that dirty the worktree @anp-oai - #29887 Fix environment skill discovery after merge @jif-oai - #29734 [codex] fix Windows ConPTY input handling @iceweasel-oai - #28593 [codex] suppress low usage remaining warnings when credits are available @brooks-oai - #29624 Preserve Windows sandbox identity during credential retry @jif-oai - #27466 [codex] Trace exec-server JSON-RPC requests @richardopenai - #29844 Follow directory symlinks in filesystem walks @jif-oai - #29637 Skip credential refresh for WindowsApps launch failures @jif-oai - #29591 feat(app-server): list descendant threads by ancestor @btraut-openai - #28034 feat(network-proxy): experimental local credential broker @winston-openai - #29736 [codex] Inject agent graph store into ThreadManager @wiltzius-openai - #29889 [apps] Thread structured icon assets through app list @drewschuster-openai - #29724 mcp: keep elicitation requests below app wire types @anp-oai - #29684 [plugins] Track plugin install requests by ID @adaley-openai - #29870 Pipeline bounded AGENTS.md and Git root probes @jif-oai - #29893 [codex] dedupe remote control account header @shuo-openai - #29851 Add a connector declaration snapshot @jif-oai - #29903 path-uri: normalize parent segments in absolute joins @anp-oai - #29852 Read connector declarations from executor plugins @jif-oai - #29785 Isolate curated plugin sync Git environment @etraut-openai - #29907 [codex] namespace sleep under clock @rka-oai - #29910 [codex] nest sleep config under current time reminder @rka-oai - #29913 feat(remote-control): add daemon pairing command @apanasenko-oai - #29936 core: add configurable <context_window_guidance> message @bolinfest - #26705 TUI Plugin Sharing 5 - polish remote plugin catalog rows @canvrno-oai - #29733 Allow ChatGPT-hosted MCP servers to use session auth @aibrahim-oai - #29833 [1/3] core: make world state snapshots serializable @sayan-oai - #29919 TUI support for buffer experience @etraut-openai - #29924 Represent MCP authentication with an enum @aibrahim-oai - #29804 code-mode: define process host wire protocol @cconger - #29956 [codex] Populate remote plugin local versions @abhinav-oai - #29835 [2/3] core: persist world state in rollouts @sayan-oai - #29899 [codex] Update reasoning effort @shijie-oai - #29837 [3/3] core: replay persisted world state @sayan-oai - #29969 Report MCP error codes with server attribution @aibrahim-oai - #29970 core: raise token budget message limits @bolinfest - #29973 [codex] route sleep through time providers @rka-oai - #19051 feat: use run agent task auth for inference @adrian-openai - #29810 core: make AGENTS.md react to environment changes @sayan-oai - #29997 core: reconcile legacy WorldState sections @sayan-oai - #29990 Parallelize environment skill loading @anp-oai - #28522 Support HTTP MCP servers from selected executor plugins @jif-oai - #28529 Support OAuth for HTTP MCP servers from selected executor plugins @jif-oai - #29656 Test executor-routed MCP OAuth token exchange @jif-oai - #29928 chore(app-server): mark thread/rollback as deprecated @owenlin0 - #29856 Persist selected capability roots and resolve availability per model step @jif-oai - #27467 [codex] Record exec-server lifecycle metrics @richardopenai - #29942 feat: add provider-aware model fallback to thread start @celia-oai - #30095 cli: rename sandbox permission profile flag @bolinfest - #30029 [codex] current time reminder interval to be set to 0 @rka-oai - #29941 core: expose permission profile to shell tools @bolinfest - #30031 [codex] add current time reminder delivery mode config @rka-oai - #30098 [codex] Retry temporarily offline exec-server recovery @richardopenai - #30033 [codex] impl delivery_mode: current time reminders on response boundaries @rka-oai - #30108 [codex] extend code-mode host IPC transport @cconger - #27470 [codex] Observe remote exec-server lifecycle @richardopenai - #30113 [codex] poll external clock during sleep @rka-oai - #29003 feat(core, mcp): cache codex_apps tools in memory @owenlin0 - #30114 release: publish standalone zsh artifacts @bolinfest - #30116 release: consume standalone zsh artifacts @bolinfest - #29648 [codex] Add managed MCP server matchers @felixxia-oai - #30100 Let extensions contribute World State sections @jif-oai - #30124 fix(app-server): suppress TUI rollback warning @fcoury-oai - #29877 [codex] Surface MCP reauthentication-required startup failures @felixxia-oai - #29988 Recognize Work web and mobile thread originators @chiam-oai - #30110 [codex] add code-mode host failure supervision hooks @cconger - #30088 Project executor skills through World State @jif-oai - #30117 [codex] Propagate traces through exec-server HTTP @wiltzius-openai - #30101 Pin MCP runtimes to model steps @jif-oai - #30134 ci: narrow Windows test skips @anp-oai - #30093 Project selected plugin runtime by environment availability @jif-oai - #30145 Reuse walk inventory for environment skill metadata @jif-oai - #30111 [codex] implement standalone code-mode process host @cconger - #29935 [codex] Attribute app-server analytics by thread originator @alexsong-oai - #30152 Reinject missing World State fragments on resume @jif-oai - #30127 Keep MCP elicitation routable across runtime refreshes @jif-oai - #29934 Expose MCP app identity in app context @martinauyeung-oai - #29909 [codex] allow CCA image generation and web search extensions @won-openai - #30157 Test selected capabilities across availability and resume @jif-oai - #30144 [codex] fix terminal rollout event durability @wiltzius-openai - #29920 Retry failed Codex Apps MCP startup @kbazzi - #29516 Persist Cloudflare affinity cookies for MCP HTTP @stevenlee-oai - #30112 [codex] add process-owned code-mode session client @cconger - #30142 [codex] wire process-owned code mode host into core @cconger - #30198 [codex] fix CreateThreadParams test initializer @anp-oai - #30148 Reuse MCP runtimes when selected availability changes nothing @jif-oai - #30215 Test selected capabilities across unavailable resume @jif-oai - #29991 [codex] narrow unused skills intro export @aibrahim-oai - #30229 Relax hooks.json top-level metadata validation @charlesgong-openai - #29927 feat(app-server): add history_mode to thread @owenlin0 - #30276 fix main @owenlin0 - #29683 [codex] Add managed new-thread model settings @hefuc-oai - #30225 Overlap executor skill reads with namespace discovery @jif-oai - #30274 [codex] allow AGENTS.md and skills to authorize delegation @charlesdu-openai - #30147 [codex] Use managed defaults for TUI threads @hefuc-oai - #30261 ensure thread.history_mode is immutable @owenlin0 - #30277 feat(app-server): add optional turn_id to thread/fork @owenlin0 - #30143 Let Codex consult user-level code-review-* skills. @anp-oai - #30285 feat: add GPT-5.6 variants to Bedrock catalog @celia-oai - #30173 Close thread persistence when submission channel closes @alfozan - #30257 [codex] Classify nested MCP authentication startup errors @felixxia-oai - #29375 [codex] Support npm marketplace plugin sources @charlesgong-openai - #30146 [codex] group blocking and postmerge CI workflows @anp-oai - #30282 feat(protocol): define missing rollout turn items @owenlin0 - #30201 fix(remote-control): avoid server token refresh retry storms @apanasenko-oai - #30273 [codex] consume pushed exec-server process events @richardopenai - #30286 core: overlap diff root discovery with world state @anp-oai - #30314 app-server: structure and test JSON shutdown logs @bolinfest - #30317 Update security check wording @etraut-openai - #30302 Preserve namespaces on custom tool calls @nhamidi-oai - #30327 core: stabilize synthesized call output IDs @bolinfest - #30291 [app-server] expose environment info RPC @maxj-oai - #29691 [plugins] Enforce marketplace source policy at runtime @xl-openai - #30384 [app-server] increase currentTime/read timeout @rka-oai - #30297 [codex] Enable remote plugins by default @xl-openai - #30490 fix(tui): clear completed safety buffering prompt @fcoury-oai - #29740 [codex] Use model metadata for skills usage instructions @ani-oai - #30511 [codex] Restore v1 delegation guidance @aibrahim-oai - #30508 Revert "Make auto-review on-request prompt more proactive" @dylan-hurd-oai - #30467 [codex] Treat max as a first-class reasoning effort @shijie-oai - #30491 Update safety check links @etraut-openai - #30607 [codex] auto-label AWS Bedrock issues @etraut-openai - #30269 [codex] disable Nagle on Rendezvous WebSockets @richardopenai - #30645 [codex] Update safety notice wording @etraut-openai - #30757 fix(core) Remove full text websocket trace @dylan-hurd-oai - #30851 docs: add tag to fenced code block @bolinfest - #30643 [codex] bound Rendezvous WebSocket liveness @richardopenai - #30867 Consolidate multi-agent v2 communication sends @bolinfest - #30872 Log multi-agent communication lifecycle @bolinfest - #30883 [codex] emit per-request TTFT completion telemetry @xli-oai - #30897 Fix inherited availability metadata for Bedrock models @shijie-oai - #30941 fix: address quick-xml security advisories @bolinfest - #30770 fix(websockets) ignore metadata for incremental requests @dylan-hurd-oai - #30334 telemetry: log structured direct tool-call timing @bolinfest - #30493 [codex] Add configurable multi-agent mode hint text @shijie-oai - #30796 Fix MIME types for path-backed feedback attachments @btraut-openai - #31056 fix(install): reuse GitHub release metadata @bolinfest - #30981 [codex] expose remote plugin versions @ericning-o - #31066 chore: remove unused git-cliff configuration @bolinfest - #31064 [codex] Read buffering metadata from response events @fc-oai - #30223 Make plugin guidance react to environment readiness @sayan-oai - #31189 Fix cancelled review leaving MCP startup busy @charliemarsh-oai - #30876 [core] Support interleaved response items @alexi-openai - #31262 [codex] Read retry model from buffering events @fc-oai - #31261 Revert "[core] Support interleaved response items" @alexi-openai - #31253 Emit exec-policy warnings for freshly loaded thread config @etraut-openai - #31179 Remove TUI exec-policy core exports @etraut-openai - #29959 Conditional codex_home dotenv @canvrno-oai - #30627 elicitations: Move to shared ElicitationService @cconger - #30318 core: trace executor skill discovery @anp-oai - #31276 Revert "Conditional codex_home dotenv" @canvrno-oai - #30956 refactor(protocol): isolate legacy item fanout @owenlin0 - #30395 [app-server] Include reset-credit details in rate limits @jayp-oai - #31267 chore(approvals) consolidate guardian calls for shell tools @dylan-hurd-oai - #31252 [tui] Truncate hook context in conversation history @abhinav-oai - #29918 [codex] Flush trailing realtime transcript tail @guinness-oai - #30226 Make Apps guidance react to MCP availability @sayan-oai - #31190 Use popup token ranges for autocomplete insertion @charliemarsh-oai - #29697 fix: attribut network requests to the exact exec on linux @jif-oai - #31303 feat(code-mode): allow disabling V8 JIT @cconger - #31271 chore: use .worktreeinclude for user Bazel config @anp-oai - #31308 fix: update crossbeam-epoch for RUSTSEC-2026-0204 @cconger - #30202 [codex] bundle code mode host in release packages @cconger - #31293 [codex] app-server: expose plugin install policy source @ericning-o - #31318 ci: share common workflow setup @anp-oai - #29992 app-server: cover selected environments in integration tests @anp-oai - #31284 Warn when configured service tiers are unsupported @etraut-openai - #31323 Extract shared HTTP transport into codex-http-client @bolinfest - #31331 Migrate direct HTTP consumers to codex-http-client @bolinfest - #31337 fix: restore Codex environment setup table @anp-oai - #31188 Preserve managed exec policy after rules parse errors @etraut-openai - #31306 [codex] Support sequential cutoff reasoning summaries @ashwinnathan-openai - #31344 exec-server: use virtual time in Noise relay test @bolinfest - #31296 refactor(protocol): map canonical tool items to legacy events @owenlin0 - #31335 core: route Responses API through system proxy @bolinfest